What process or policy would you set in place to prevent software integrations and downloads in the organization mainframe?

What process or policy would you set in place to prevent software integrations and downloads in the organization mainframe? Most organizations block employees from downloading any software on their computers because of this reason.